CVE-2022-2422
Feathers - SQL injection via attribute aliases
Summary
Feathers - SQL injection via attribute aliases
Original description
The description as published by the source.
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory csirt.divd.nl
- advisory csirt.divd.nl
- advisory github.com
- advisory nvd.nist.gov